CVE-2025-36271 MEDIUM

CVE-2025-36271: IBM Integrated Analytics System (IIAS) is affected by a predictable salt vulnerability in Magneto component

Vendor Ibm

Product Integrated Analytics System

Weakness CWE-759 · Hash without salt

Published August 28, 2026

Last update August 28, 2026

View on NVD All CVEs

CVSS base score

5.9/10

Attack vector Network

Attack complexity High

Privileges required None

User interaction None

Confidentiality High

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

Key dates

02Disclosure timeline

August 28, 2026 CVE published

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-36271 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/759.html AskarLabs — CWE-759 write-up Use of a One-Way Hash without a Salt

Related vulnerabilities

Identifiers

CVE CVE-2025-36271

CWE CWE-759

CVSS 5.9 / MEDIUM

Affected versions